Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/SmKCxbZzEYMlHW6F4i6s-3DcFG4.roa
File: SmKCxbZzEYMlHW6F4i6s-3DcFG4.roa (raw, json)
Hash identifier: 8aF+rC0+2iRBEhKeXr3tMoC7J8eneSS0+6Hu8sVszrc=
Subject key identifier: 4A:62:82:C5:B6:73:11:83:25:1D:6E:85:E2:2E:AC:FB:70:DC:14:6E
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 018CC500602ACFE6A526F2294591AFBA16DA
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/SmKCxbZzEYMlHW6F4i6s-3DcFG4.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3177
IP address blocks: 185.129.230.0/24 maxlen: 24
185.129.184.0/22 maxlen: 22
185.129.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 06 Feb 2024 09:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:60:2a:cf:e6:a5:26:f2:29:45:91:af:ba:16:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a6282c5b6731183251d6e85e22eacfb70dc146e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:ac:84:57:5d:97:2f:b7:2b:ad:a9:15:e2:
86:42:09:c4:1f:82:62:e7:8b:c5:9b:70:8d:48:65:
e1:ae:95:52:f7:65:25:61:c7:56:69:fe:6e:da:45:
c9:ad:8f:12:f3:06:e5:ea:75:67:2d:f6:52:92:10:
d9:0a:63:0f:5b:96:1b:88:46:cf:b9:7d:6b:99:ec:
42:23:19:fb:4b:e4:54:68:2d:65:92:aa:bb:66:e1:
67:92:46:6f:81:96:da:1f:62:7f:05:35:cd:b3:51:
37:20:2e:cb:28:0d:c2:57:4a:83:bd:a9:8b:58:e2:
e1:d8:38:02:75:26:df:20:ed:de:d3:b3:06:f1:2b:
70:40:0e:65:93:6e:af:e8:78:08:a1:3a:aa:af:52:
93:2f:87:05:93:8f:4b:a6:6f:11:b1:61:5f:db:93:
e1:4a:22:7a:4b:e1:26:76:f6:38:8a:01:4e:cb:2c:
e8:92:11:8b:4a:78:0c:48:c6:2e:2c:87:cd:26:ca:
7b:a0:14:9b:63:25:26:1b:4b:78:ce:72:04:d9:11:
d0:ce:db:68:94:1f:9b:d7:fe:f7:c2:12:56:0a:dd:
64:02:3d:9e:8b:8f:21:76:e8:5d:b4:80:74:1a:81:
28:65:98:a4:74:e8:23:29:b4:0d:fb:ba:6f:6f:56:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:82:C5:B6:73:11:83:25:1D:6E:85:E2:2E:AC:FB:70:DC:14:6E
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/SmKCxbZzEYMlHW6F4i6s-3DcFG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.184.0/22
185.129.190.0/23
185.129.230.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7b:17:2e:c0:8c:78:9e:f4:52:a7:6a:59:33:53:4d:ee:72:
e0:64:c0:e6:84:31:50:3b:25:97:30:1f:10:a4:c8:77:9f:ea:
19:16:9d:15:b6:fe:e0:d2:2d:6a:97:75:af:ec:03:13:c3:6e:
35:7b:da:03:78:7b:6c:f2:02:0a:ba:ed:97:67:9a:49:c2:6d:
55:6b:22:5f:7b:41:05:d4:e4:00:a8:b5:5f:1e:6a:00:2e:54:
8f:07:e7:16:7c:47:a7:97:d9:d0:33:39:10:75:4a:7e:ac:14:
3e:90:d9:71:82:aa:28:d6:f5:5b:90:e0:b3:cd:d1:19:4a:d7:
c7:3e:38:be:04:4d:ba:4e:da:e8:89:c7:0f:77:c3:99:dc:4f:
25:22:9d:9d:37:5d:0d:a2:47:b6:a0:9b:a2:33:c2:c9:df:1e:
47:39:28:e4:43:ea:d0:29:eb:96:84:4e:0f:da:b9:80:59:8d:
88:e1:b7:21:e4:df:52:bf:b4:fe:86:dc:11:ef:19:8a:85:39:
f5:1f:1d:1f:03:91:73:69:5a:7f:91:7b:7e:76:73:5a:ea:73:
e8:e3:d8:ea:75:9e:fb:c2:04:1a:08:c1:21:f5:7d:49:b3:d3:
5e:54:62:20:49:29:78:f6:51:e8:c4:8a:79:f2:d7:10:3d:67:
4c:fb:d4:29
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzFAGAqz+alJvIpRZGvuhbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh
MjM4YzAwHhcNMjQwMTAxMTIyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTYyODJjNWI2NzMxMTgzMjUxZDZlODVlMjJlYWNmYjcwZGMxNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowmshFddly+3K62pFeKGQgnEH4Ji
54vFm3CNSGXhrpVS92UlYcdWaf5u2kXJrY8S8wbl6nVnLfZSkhDZCmMPW5YbiEbP
uX1rmexCIxn7S+RUaC1lkqq7ZuFnkkZvgZbaH2J/BTXNs1E3IC7LKA3CV0qDvamL
WOLh2DgCdSbfIO3e07MG8StwQA5lk26v6HgIoTqqr1KTL4cFk49Lpm8RsWFf25Ph
SiJ6S+EmdvY4igFOyyzokhGLSngMSMYuLIfNJsp7oBSbYyUmG0t4znIE2RHQztto
lB+b1/73whJWCt1kAj2ei48hduhdtIB0GoEoZZikdOgjKbQN+7pvb1aokwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEpigsW2cxGDJR1uheIurPtw3BRuMB8GA1UdIwQY
MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt
OTdjOWFhYjgyOGYyLzEvU21LQ3hiWnpFWU1sSFc2RjRpNnMtM0RjRkc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy
LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuYG4AwQB
uYG+AwQAuYHmMA0GCSqGSIb3DQEBCwUAA4IBAQCCexcuwIx4nvRSp2pZM1NN7nLg
ZMDmhDFQOyWXMB8QpMh3n+oZFp0Vtv7g0i1ql3Wv7AMTw241e9oDeHts8gIKuu2X
Z5pJwm1VayJfe0EF1OQAqLVfHmoALlSPB+cWfEenl9nQMzkQdUp+rBQ+kNlxgqoo
1vVbkOCzzdEZStfHPji+BE26TtroiccPd8OZ3E8lIp2dN10Noke2oJuiM8LJ3x5H
OSjkQ+rQKeuWhE4P2rmAWY2I4bch5N9Sv7T+htwR7xmKhTn1Hx0fA5FzaVp/kXt+
dnNa6nPo49jqdZ77wgQaCMEh9X1Js9NeVGIgSSl49lHoxIp58tcQPWdM+9Qp
-----END CERTIFICATE-----
Generated at Tue Feb 6 15:04:19 2024 by rpki-client on console-ams.rpki-client.org